Passwords are hashed using Argon2id. Access tokens are short-lived. Revoking a session in the Portal or control panel invalidates it immediately. The child app joins only through a single-use invitation. A rule takes effect after phone acknowledgement. Guardian does not read private conversations or turn on a hidden camera. The data register and retention details are at /privacy and /security.
How does Guardian protect sessions and data?
Argon2id, short-lived access tokens, refresh token rotation and device acknowledgement. No hidden viewing.